← Screendog

Privacy Policy

This Privacy Policy describes how Screendog ("we", "us") collects, uses, and shares information when you use screendog.io and the Screendog service. We try to keep this short and readable. If anything is unclear, email privacy@screendog.io.

1. Who we are

Screendog is operated as a sole proprietorship based in the United States. The data controller for the purposes of GDPR and similar laws is Screendog. Contact: privacy@screendog.io.

2. What we collect

Account data

• Email address, display name, hashed password (bcrypt), account creation timestamp.
• Workspace names, slugs, plan tier, and audit metadata (which user created which workspace and when).

Recordings you create

• The video and audio you record (your screen + microphone), stored in our object storage.
• Recording metadata (title, duration, size, created timestamp, ticket type, environment info you choose to attach).
• An AI-generated transcript of the audio.

Billing data

• If you upgrade to a paid plan, Stripe (our payment processor) collects your card details directly. We receive only your Stripe customer ID, subscription ID, plan, and renewal date. We never see or store full card numbers.

Technical data

• IP address (used for rate limiting and abuse detection, not retained beyond logs).
• Session cookies (see Cookies section below).
• Browser user agent strings in error logs.

3. How we use it

• To operate the service — store your recordings, render your dashboard, authenticate you.
• To transcribe recordings — your recording's audio is sent to OpenAI (see sub-processors below) to generate a transcript. Transcripts are returned to us and stored alongside the recording.
• To process payments — passed to Stripe.
• To enforce limits and prevent abuse — rate limits, plan quotas, audit logs.
• To communicate with you — service-related email such as password resets. We do not send marketing email today.

We do not sell your data, share it with advertisers, or use your recordings to train AI models.

4. Sub-processors

Screendog relies on the following sub-processors to deliver the service. Each one only processes the data necessary for its function.

Provider	Purpose	Data shared	Location
Replit, Inc.	Hosting, object storage (GCS-backed), database, deployment	All service data	United States
OpenAI, L.L.C.	Audio transcription (Whisper) and AI auto-fill of ticket fields	Recording audio + transcript text	United States
Stripe, Inc.	Payment processing for paid plans	Email, name, payment details (collected directly by Stripe)	United States
Google Fonts	Web font delivery	IP address (Google's own privacy policy applies)	Global CDN

The sub-processors above act on our behalf under contract.

5. Where your data lives

All service data is stored in the United States. If you access Screendog from outside the US, you consent to the transfer of your data to the US for processing under the protections in this policy.

6. How long we keep it

• Recordings: kept until you delete them. Soft-deleted recordings sit in a recoverable trash for 30 days and are then permanently removed from our database and object storage.
• Account data: kept while your account is active. When you delete your account (see Section 9), all account data, recordings, and workspaces where you are the sole owner are permanently deleted within 30 days.
• Audit logs: retained for security and abuse investigations for up to 1 year.
• Billing records: retained as long as required by tax and accounting law (typically 7 years in the US).

7. Cookies

We use cookies that are strictly necessary to operate the service:

• sd.sid / __Host-sd_sid — your signed-in session. Required to keep you logged in.
• sd.csrf / __Host-sd_csrf — CSRF defense token. Required to submit forms safely.

We do not use analytics, tracking, advertising, or third-party cookies. Because all cookies are strictly necessary, no cookie consent banner is legally required under ePrivacy / GDPR. The notice we show is informational.

8. Your rights

Depending on where you live, you have some or all of the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — fix anything inaccurate.
• Deletion — request that we erase your data ("right to be forgotten" under GDPR; "right to delete" under CCPA/CPRA). You can do this yourself at any time from your account page, or by emailing privacy@screendog.io.
• Portability — request a machine-readable export.
• Withdraw consent — for any processing based on consent.
• Object — to processing based on legitimate interest.
• Lodge a complaint — with your local data protection authority.

We respond to verified requests within 30 days. We may ask you to verify your identity using the email address on file.

9. Deleting your account and data

You can delete your account and all associated data at any time from your account page. Deletion is irreversible. When you delete your account:

• All your recordings (video, audio, transcripts) are permanently removed from our database and object storage.
• Workspaces where you are the sole owner are deleted, along with their members and recordings.
• Workspaces where you are a member but not the sole owner: your membership is removed; the workspace and its contents stay.
• Your active Stripe subscription (if any) is canceled.
• Audit logs may retain a record of the deletion event for security purposes.

10. Children's privacy

Screendog is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has signed up, contact us and we will delete the account.

11. Security

We use bcrypt for passwords, TLS for all traffic, signed double-submit CSRF tokens, strict CSP and HSTS headers, and rate limits on every state-changing endpoint. We disclose our security policy at /.well-known/security.txt. No system is 100% secure; if you discover a vulnerability, please contact us at security@screendog.io.

12. Changes to this policy

If we make material changes, we will update the "Last updated" date and post a notice on the home page and the account dashboard for at least 30 days before the change takes effect.

13. Contact

Privacy questions: privacy@screendog.io
Data deletion requests: handle them yourself at /account, or email the address above.
Security disclosures: security@screendog.io.

This policy is provided as a starting point and has not been reviewed by a lawyer. For your own legal protection, you should have it reviewed by privacy counsel before relying on it in production.